RIPE Atlas Documentation

Version 4460 ​

Version 4460 is identified by a value between "4460" and "4539" for the key fw in the result.

Changes between 4400 and 4460

  • The key "addr" in 4400 became "dst_addr" in 4460.
  • The key "address" in 4400 became "dst_addr" in 4460.
  • The key "mode" in 4400 became "af" and "proto" or "method" in 4460.
  • The key "name" in 4400 became "dst_name" in 4460.
  • The key "paris-id" in 4400 became "paris_id" in 4460.
  • The key "pf" in 4400 became "af" in 4460.
  • The key "port" in 4400 became "dst_port" in 4460.
  • The key "srcaddr" in 4400 became "src_addr" in 4460.
  • The following fields were added: "method" (where applicable), "ver" (where not already present but applicable), and "type".

Version 4460 Ping / v6 Ping ​

View changes since previous version.

Result:

  • "addr" -- IP address of the destination (deprecated) (string)
  • "af" -- address family, 4 or 6 (integer)
  • "avg" -- average round-trip time (float)
  • "dst_addr" -- IP address of the destination (string)
  • "dst_name" -- name of the destination (string)
  • "dup" -- number of duplicate packets (int)
  • "from" -- IP address of the probe as known by the controller (string)
  • "max" -- maximum round-trip time (float)
  • "min" -- minimum round-trip time (float)
  • "msm_id" -- measurement identifier (int)
  • "name" -- name of the destination (deprecated) (string)
  • "prb_id" -- source probe ID (int)
  • "proto" -- "ICMP" (string)
  • "rcvd" -- number of packets received (int)
  • "result" -- variable content, depending on type of response (array)
    Each element is an associative array consisting of:
    • Case: Timeout
      • "x" -- "*" (string)
    • Case: Error
      • "error" -- description of error (string)
    • Case: Reply
      • "rtt" -- round-trip-time in milliseconds (float)
      • "ttl" -- [optional] time-to-live reply if different from ttl in first reply (int)
      • "dup" -- [optional] signals that the reply is a duplicate (int)
  • "sent" -- number of packets sent (int)
  • "size" -- packet size (int)
  • "src_addr" -- source address used by probe (string)
  • "timestamp" -- Unix timestamp (int)
  • "ttl" -- time-to-live field in the first reply (int)
  • "type" -- "ping" (string)

Example result:

json
{
  "addr": "2001:7fd::1",
  "af": 6,
  "avg": 6.5760000000000005,
  "dst_addr": "2001:7fd::1",
  "dst_name": "2001:7fd::1",
  "dup": 0,
  "from": "2001:67c:2e8:13:220:4aff:fec6:cd06",
  "fw": 4460,
  "max": 15.282999999999999,
  "min": 2.2080000000000002,
  "msm_id": 2001,
  "name": "k.root-servers.net",
  "prb_id": 114,
  "proto": "ICMP",
  "rcvd": 3,
  "result": [
    {
      "rtt": 2.2370000000000001
    },
    {
      "rtt": 2.2080000000000002
    },
    {
      "rtt": 15.282999999999999
    }
  ],
  "sent": 3,
  "size": 0,
  "src_addr": "2001:67c:2e8:13:220:4aff:fec6:cd06",
  "timestamp": 1339665710,
  "ttl": 62,
  "type": "ping"
}

Version 4460 Traceroute / v6 Traceroute ​

View changes since previous version.

Result:

  • "af" -- address family, 4 or 6 (integer)
  • "dst_addr" -- IP address of the destination (string)
  • "dst_name" -- name of the destination (string)
  • "endtime" -- Unix timestamp for end of measurement (int)
  • "from" -- IP address of the probe as know by controller (string)
  • "msm_id" -- measurement identifier (int)
  • "paris_id" -- variation for the Paris mode of traceroute (int)
  • "prb_id" -- source probe ID (int)
  • "proto" -- "UDP" or "ICMP" (string)
  • "result" -- list of hop elements (array)
    Each element is an associative array consisting of:
    • "hop" -- hop number (int)
    • "error" -- [optional] when an error occurs trying to send a packet. In that case there will not be a result structure. (string)
    • "result" -- variable content, depending on type of response (array)
      Each element is an associative array consisting of:
      • Case: Timeout
        • "x" -- "*" (string)
      • Case: Reply
        • "from" -- IPv4 or IPv6 source address in reply (string)
        • "err" -- (optional) error ICMP: "N" (network unreachable,), "H" (destination unreachable), "A" (administratively prohibited), "P" (protocol unreachable), "p" (port unreachable) (string)
        • "rtt" -- round-trip-time of reply, not present when the response is late (float)
        • "size" -- size of reply (int)
        • "ttl" -- time-to-live in reply (int)
        • "ittl" -- (optional) time-to-live in packet that triggered the error ICMP. Omitted if equal to 1 (int)
        • "late" -- (optional) number of packets a reply is late, in this case rtt is not present (int)
        • "icmpext" -- [optional] information when icmp header is found in reply (object)
          • "version" -- RFC4884 version (int)
          • "rfc4884" -- "1" if length indication is present, "0" otherwise (int)
          • "obj" -- elements of the object (array)
            • "class" -- RFC4884 class (int)
            • "type" -- RFC4884 type (int)
            • "mpls" -- [optional] MPLS data, RFC4950, shown when class is "1" and type is "1" (array)
              • "exp" -- for experimental use (int)
              • "label" -- mpls label (int)
              • "s" -- bottom of stack (int)
              • "ttl" -- time to live value (int)
  • "size" -- packet size (int)
  • "src_addr" -- source address used by probe (string)
  • "timestamp" -- Unix timestamp for start of measurement (int)
  • "type" -- "traceroute" (string)

Example result:

json
{
  "af": 6,
  "dst_addr": "2001:7fd::1",
  "dst_name": "2001:7fd::1",
  "endtime": 1339665496,
  "from": "2001:67c:2e8:13:220:4aff:fec6:cd06",
  "fw": 4460,
  "msm_id": 6001,
  "paris_id": 4,
  "prb_id": 114,
  "proto": "UDP",
  "result": [
    {
      "hop": 1,
      "result": [
        {
          "from": "2001:67c:2e8:13::2",
          "rtt": 2.2989999999999999,
          "size": 96,
          "ttl": 63
        },
        {
          "from": "2001:67c:2e8:13::2",
          "rtt": 2.4990000000000001,
          "size": 96,
          "ttl": 63
        },
        {
          "from": "2001:67c:2e8:13::2",
          "rtt": 2.8719999999999999,
          "size": 96,
          "ttl": 63
        }
      ]
    },
    {
      "hop": 2,
      "result": [
        {
          "from": "2001:7f8:1::a502:5152:1",
          "rtt": 2.4009999999999998,
          "size": 96,
          "ttl": 63
        },
        {
          "from": "2001:7f8:1::a502:5152:1",
          "rtt": 2.5409999999999999,
          "size": 96,
          "ttl": 63
        },
        {
          "from": "2001:7f8:1::a502:5152:1",
          "rtt": 2.6360000000000001,
          "size": 96,
          "ttl": 63
        }
      ]
    },
    {
      "hop": 3,
      "result": [
        {
          "from": "2001:7fd::1",
          "rtt": 2.4060000000000001,
          "size": 96,
          "ttl": 62
        },
        {
          "from": "2001:7fd::1",
          "rtt": 2.3300000000000001,
          "size": 96,
          "ttl": 62
        },
        {
          "from": "2001:7fd::1",
          "rtt": 2.4060000000000001,
          "size": 96,
          "ttl": 62
        }
      ]
    }
  ],
  "size": 40,
  "src_addr": "2001:67c:2e8:13:220:4aff:fec6:cd06",
  "timestamp": 1339665496,
  "type": "traceroute"
}

Version 4460 DNS Lookup ​

View changes since previous version.

Result:

  • "af" -- [optional] IP version: "4" or "6" (int)
  • "dst_addr" -- [optional] IP address of the destination (string)
  • "dst_name" -- [optional] hostname of the destination (string)
  • "error" -- [optional] error message (associative array)
    • "timeout" -- query timeout (int)
    • "getaddrinfo" -- error message (string)
  • "from" -- [optional] IP address of the source (string)
  • "msm_id" -- measurement identifier (int)
  • "prb_id" -- source probe ID (int)
  • "proto" -- "TCP" or "UDP" (string)
  • "qbuf" -- [optional] query payload buffer which was sent to the server, UU encoded (string)
    See example code for decoding the value
  • "result" -- [optional] response from the DNS server (associative array)
    • "ANCOUNT" -- answer count, RFC 1035 4.1.1 (int)
    • "ARCOUNT" -- additional record count, RFC 1035, 4.1.1 (int)
    • "ID" -- query ID, RFC 1035 4.1.1 (int)
    • "NSCOUNT" -- name server count (int)
    • "QDCOUNT" -- number of queries (int)
    • "abuf" -- answer payload buffer from the server, UU encoded (string)
      See example code for decoding the value
    • "answers" -- first two records from the response decoded by the probe, if they are TXT or SOA; other RR can be decoded from "abuf" (array)
      Each element is an associative array consisting of:
      • "MNAME" -- domain name, RFC 1035, 3.1.13 (string)
      • "NAME" -- domain name. (string)
      • "RDATA" -- [type TXT] txt value, (string)
      • "RNAME" -- [if type SOA] mailbox, RFC 1035 3.3.13 (string)
      • "SERIAL" -- [type SOA] zone serial number, RFC 1035 3.3.13 (int)
      • "TTL" -- [type SOA] time to live, RFC 1035 4.1.3 (int)
      • "TYPE" -- RR "SOA" or "TXT" (string), RFC 1035
    • "rt" -- [optional] response time in milli seconds (float)
    • "size" -- [optional] response size (int)
    • "src_addr" -- [optional] the source IP address added by the probe (string). (fw >= 4470)
    • "subid" -- [optional] sequence number of this result within a group of results, available if the resolution is done by the probe's local resolver
    • "submax" -- [optional] total number of results within a group (int)
  • "timestamp" -- start time, in Unix timestamp (int)
  • "type" -- "dns" (string)

Notes:

  • If a hostname was provided, both the hostname (dst_name) and the IP address (dst_addr) will be in the response.
  • If an IP address was provided, the name field will not be filled, unless the address which was given differs from the probe's resolution of the address. For instance, if "2001:0DB8:0:0::1" was provided, and the probe resolves it to "2001:0DB8::1", the first value will be returned as the name and the second as the address.
  • The dst_addr field will always be present, except when there is an error.

Example result:

json
{
  "af": 6,
  "dst_addr": "2001:7fd::1",
  "from": "2001:67c:2e8:13:220:4aff:fec6:cd06",
  "fw": 4460,
  "msm_id": 11001,
  "prb_id": 114,
  "proto": "UDP",
  "result": {
    "ANCOUNT": 1,
    "ARCOUNT": 13,
    "ID": 14016,
    "NSCOUNT": 13,
    "QDCOUNT": 1,
    "abuf": "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",
    "answers": [
      {
        "MNAME": "a.root-servers.net.",
        "NAME": ".",
        "RDLENGTH": 64,
        "RNAME": "nstld.verisign-grs.com.",
        "SERIAL": 2012061400,
        "TTL": 86400,
        "TYPE": "SOA"
      }
    ],
    "rt": 3.4279999999999999,
    "size": 493
  },
  "timestamp": 1339664565,
  "type": "dns"
}

Version 4460 HTTP ​

View changes since previous version.

Result:

  • "from" -- IP address of the probe as known by controller (string)
  • "msm_id" -- measurement identifier (int)
  • "prb_id" -- source probe ID (int)
  • "result" -- results of query (array)
    Each element is an associative array consisting of:
    • "af" -- address family, 4 or 6 (integer)
    • "bsize" -- size of body in octets (int)
    • "dnserr" -- [optional] DNS resolution failed (string)
    • "dst_addr" -- target address (string)
    • "err" -- [optional] other failure (string)
    • "header" -- [optional] elements are strings. The last string can be empty to indicate the end of enders or end with "[...]" to indicate truncation (array)
    • "hsize" -- header size in octets (int)
    • "method" -- "GET", "HEAD", or "POST" (string)
    • "res" -- HTTP result code (int)
    • "rt" -- time to execute request excluding DNS (float)
    • "src_addr" -- source address used by probe (string)
    • "subid" -- [optional] sequence number of this result within a group of results, when the 'all' option is used without the 'combine' option (int)
    • "submax" -- [optional] total number of results within a group (int)
    • "time" -- [optional] Unix timestamp, when the 'all' option is used with the 'combine' option (int)
    • "ver" -- major, minor version of http server (string)
  • "timestamp" -- Unix timestamp (int)
  • "type" -- "http" (string)
  • "uri" -- request uri (string)

Example result:

json
{
"from": "2001:67c:2e8:13:220:4aff:fec6:cd06",
"fw": 4460,
"msm_id": 13023,
"prb_id": 114,
"result": [
{
"af": 6,
"bsize": 1406,
"dst_addr": "2001:67c:2e8:22::c100:68b",
"hsize": 263,
"method": "GET",
"res": 200,
"rt": 10.638999999999999,
"src_addr": "2001:67c:2e8:13:220:4aff:fec6:cd06",
"ver": "1.1"
}
],
"timestamp": 1339665455,
"type": "http",
"uri": "http://www.ripe.net/favicon.ico"
}

Version 4460 TLS (SSL) GET Cert ​

View changes since previous version.

Result:

  • "af" -- address family, 4 or 6 (integer)
  • "cert" -- results of query (array)
    Each element of the array is a string containing a base 64 encoded certificate. Newlines are replaced with "\n"
  • "dst_addr" -- IP address of the destination (string)
  • "dst_name" -- name of the destination (string)
  • "dst_port" -- port name (string)
  • "from" -- IP address of the probe as known by controller (string)
  • "method" -- "SSL" (string)
  • "msm_id" -- measurement identifier (int)
  • "prb_id" -- source probe ID (int)
  • "src_addr" -- source address used by probe (string)
  • "timestamp" -- Unix timestamp (int)
  • "type" -- "sslcert" (string)
  • "ver" -- (SSL) protocol versioN (string)

Example result:

json
{
  "af": 6,
  "cert": [
    "-----BEGIN CERTIFICATE-----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\\nlQuEV20=\\n-----END CERTIFICATE-----",
    "-----BEGIN CERTIFICATE-----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\\n9ZKNu8BVIASm2LAXFszj0Mi0PeXZhMbT9m5teMl5Q+h6N/9cNUm/ocU=\\n-----END CERTIFICATE-----",
    "-----BEGIN CERTIFICATE-----\\nMIIEQjCCA6ugAwIBAgIEQodApTANBgkqhkiG9w0BAQUFADCBwzELMAkGA1UEBhMC\\nVVMxFDASBgNVBAoTC0VudHJ1c3QubmV0MTswOQYDVQQLEzJ3d3cuZW50cnVzdC5u\\nZXQvQ1BTIGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxpYWIuKTElMCMGA1UECxMc\\nKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDE6MDgGA1UEAxMxRW50cnVzdC5u\\nZXQgU2VjdXJlIFNlcnZlciBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNjEw\\nMDEwNTAwMDBaFw0xNDA3MjYxODE1MTVaMGwxCzAJBgNVBAYTAlVTMRUwEwYDVQQK\\nEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xKzApBgNV\\nBAMTIkRpZ2lDZXJ0IEhpZ2ggQXNzdXJhbmNlIEVWIFJvb3QgQ0EwggEiMA0GCSqG\\nSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzOVz5vvUu+UtLTKm3+WBP8nNJUm2cSrD\\n1ZQ0Z6IKHLBfaaZAscS3so/QmKSpQVk609yU1jzbdDikSsxNJYL3SqVTEjju80lt\\ncZF+Y7arpl/DpIT4T2JRvvjF7Ns4kuMG5QiRDMQoQVX7y1qJFX5x6DW/TXIJPb46\\nOFBbdzEbjbPHJEWap6xtABRaBLe6E+tRCphBQSJOZWGHgUFQpnlcid4ZSlfVLuZd\\nHFMsfpjNGgYWpGhz0DQEE1yhcdNafFXbXmThN4cwVgTlEbQpgBLxeTmIogIRfCdm\\nt4i3ePLKCqg4qwpkwr9mXZWEwaElHoddGlALIBLMQbtuC1E4uEvLAgMBAAGjggET\\nMIIBDzASBgNVHRMBAf8ECDAGAQH/AgEBMCcGA1UdJQQgMB4GCCsGAQUFBwMBBggr\\nBgEFBQcDAgYIKwYBBQUHAwQwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzABhhdo\\ndHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8v\\nY3JsLmVudHJ1c3QubmV0L3NlcnZlcjEuY3JsMB0GA1UdDgQWBBSxPsNpA/i/RwHU\\nmCYaCALvY2QrwzALBgNVHQ8EBAMCAQYwHwYDVR0jBBgwFoAU8BdiE1U9s/8KAGv7\\nUISX8+1i0BowGQYJKoZIhvZ9B0EABAwwChsEVjcuMQMCAIEwDQYJKoZIhvcNAQEF\\nBQADgYEASA4rbyBiTCiToyQ9WKshz4D4mpeQaiLtWnxHNpnneYR1qySPkgrVYQSu\\nw2pcsszZ5ESHb9uPOGL3RDadurxuB8TUjegf0Qtgo7WczmO+7Wfc+Lrebskly1u1\\nnXZwC99CcvhPQRFkpdLq/NWvEfQVOGecIKhLd1qRMkIy54Wz3zY=\\n-----END CERTIFICATE-----"
  ],
  "dst_addr": "2a01:4f8:121:30a3::78:16",
  "dst_name": "atlas.ripe.net",
  "dst_port": "https",
  "from": "2001:67c:2e8:13:220:4aff:fec6:cd06",
  "fw": 4460,
  "method": "SSL",
  "msm_id": 15002,
  "prb_id": 114,
  "src_addr": "2001:67c:2e8:13:220:4aff:fec6:cd06",
  "timestamp": 1339632166,
  "type": "sslcert",
  "ver": "3.0"
}